← Back

Progress

progress

258 CVEs • 47 products

Products (47)

Click to collapse
Toggle
Whatsup Gold
whatsup_gold
56 CVEs
Moveit Transfer
moveit_transfer
33 CVEs
Ws Ftp Server
ws_ftp_server
28 CVEs
Sitefinity
sitefinity
24 CVEs
Loadmaster
loadmaster
21 CVEs
Telerik Reporting
telerik_reporting
14 CVEs
Openedge
openedge
12 CVEs
Telerik Ui For Asp.net Ajax
telerik_ui_for_asp.net_ajax
8 CVEs
Moveit Automation
moveit_automation
8 CVEs
Telerik Report Server
telerik_report_server
7 CVEs
Multi Tenant Loadmaster
multi-tenant_loadmaster
7 CVEs
Connection Manager For Objectscale*
connection_manager_for_objectscale*
7 CVEs
Ecs Connection Manager
ecs_connection_manager
7 CVEs
Progress
progress
5 CVEs
Sitefinity Cms
sitefinity_cms
5 CVEs
Flowmon
flowmon
4 CVEs
Telerik Ui For Winforms
telerik_ui_for_winforms
3 CVEs
Telerik Document Processing Libraries
telerik_document_processing_libraries
3 CVEs
Webspeed
webspeed
2 CVEs
Webspeed Messenger
webspeed_messenger
2 CVEs
Ipswitch Ws Ftp Server
ipswitch_ws_ftp_server
2 CVEs
Datadirect Odbc Oracle Wire Protocol Driver
datadirect_odbc_oracle_wire_protocol_driver
2 CVEs
Openedge Innovation
openedge_innovation
2 CVEs
Hybrid Data Pipeline
hybrid_data_pipeline
2 CVEs
Moveit Waf
moveit_waf
2 CVEs
Multi Tenant Hypervisor
multi-tenant_hypervisor
2 CVEs
Sharefile Storage Zones Controller
sharefile_storage_zones_controller
2 CVEs
Flowmon Anomaly Detection System
flowmon_anomaly_detection_system
2 CVEs
Database
database
1 CVE
4gl Compiler
4gl_compiler
1 CVE
Mixlib Archive
mixlib-archive
1 CVE
Kendo Ui
kendo_ui
1 CVE
Telerik Extensions For Asp.net Mvc
telerik_extensions_for_asp.net_mvc
1 CVE
Fiddler
fiddler
1 CVE
Whatsupgold
whatsupgold
1 CVE
Flowmon Os
flowmon_os
1 CVE
Flowmon Packet Investigator
flowmon_packet_investigator
1 CVE
Moveit Cloud
moveit_cloud
1 CVE
Openedge Explorer
openedge_explorer
1 CVE
Openedge Management
openedge_management
1 CVE
Chef Infra Server
chef_infra_server
1 CVE
Telerik Justdecompile
telerik_justdecompile
1 CVE
Telerik Test Studio
telerik_test_studio
1 CVE
Moveit Gateway
moveit_gateway
1 CVE
Kendoreact
kendoreact
1 CVE
Kendo Ui For Vue
kendo_ui_for_vue
1 CVE
Telerik Ui For Winui
telerik_ui_for_winui
1 CVE

CVEs (258)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2024-5012
1Progress
1Whatsup Gold
Jun 17, 2026
Jun 25, 2024
N/A· v4
8.6 HIGH· v3
N/A· v2
In WhatsUp Gold versions released before 2023.1.3, there is a missing authentication vulnerability in WUGDataAccess.Credentials. This vulnerability allows unauthenticated attackers to disclose Windows Credentials stored...Show more
In WhatsUp Gold versions released before 2023.1.3, there is a missing authentication vulnerability in WUGDataAccess.Credentials. This vulnerability allows unauthenticated attackers to disclose Windows Credentials stored in the product Credential Library.Show less
CVE-2024-5011
1Progress
1Whatsup Gold
Jun 17, 2026
Jun 25, 2024
N/A· v4
7.5 HIGH· v3
N/A· v2
In WhatsUp Gold versions released before 2023.1.3, an uncontrolled resource consumption vulnerability exists. A specially crafted unauthenticated HTTP request to the TestController Chart functionality can lead to denial...Show more
In WhatsUp Gold versions released before 2023.1.3, an uncontrolled resource consumption vulnerability exists. A specially crafted unauthenticated HTTP request to the TestController Chart functionality can lead to denial of service.Show less
CVE-2024-5010
1Progress
1Whatsup Gold
Jun 17, 2026
Jun 25, 2024
N/A· v4
7.5 HIGH· v3
N/A· v2
In WhatsUp Gold versions released before 2023.1.3, a vulnerability exists in the TestController functionality.  A specially crafted unauthenticated HTTP request can lead to a disclosure of sensitive information.
CVE-2024-5009
1Progress
1Whatsup Gold
Jun 17, 2026
Jun 25, 2024
N/A· v4
8.4 HIGH· v3
N/A· v2
In WhatsUp Gold versions released before 2023.1.3, an Improper Access Control vulnerability in Wug.UI.Controllers.InstallController.SetAdminPassword allows local attackers to modify admin's password.
CVE-2024-5008
1Progress
1Whatsup Gold
Jun 17, 2026
Jun 25, 2024
N/A· v4
8.8 HIGH· v3
N/A· v2
In WhatsUp Gold versions released before 2023.1.3, an authenticated user with certain permissions can upload an arbitrary file and obtain RCE using Apm.UI.Areas.APM.Controllers.Api.Applications.AppProfileImportControll...Show more
In WhatsUp Gold versions released before 2023.1.3, an authenticated user with certain permissions can upload an arbitrary file and obtain RCE using Apm.UI.Areas.APM.Controllers.Api.Applications.AppProfileImportController.Show less
CVE-2024-4885
1Progress
1Whatsup Gold
Jun 17, 2026
Jun 25, 2024
N/A· v4
9.8 CRITICAL· v3
N/A· v2
In WhatsUp Gold versions released before 2023.1.3, an unauthenticated Remote Code Execution vulnerability in Progress WhatsUpGold.  The WhatsUp.ExportUtilities.Export.GetFileWithoutZip allows execution of commands...Show more
In WhatsUp Gold versions released before 2023.1.3, an unauthenticated Remote Code Execution vulnerability in Progress WhatsUpGold.  The WhatsUp.ExportUtilities.Export.GetFileWithoutZip allows execution of commands with iisapppool\nmconsole privileges.Show less
CVE-2024-4884
1Progress
1Whatsup Gold
Jun 17, 2026
Jun 25, 2024
N/A· v4
9.8 CRITICAL· v3
N/A· v2
In WhatsUp Gold versions released before 2023.1.3, an unauthenticated Remote Code Execution vulnerability in Progress WhatsUpGold.  The Apm.UI.Areas.APM.Controllers.CommunityController allows execution of commands with...Show more
In WhatsUp Gold versions released before 2023.1.3, an unauthenticated Remote Code Execution vulnerability in Progress WhatsUpGold.  The Apm.UI.Areas.APM.Controllers.CommunityController allows execution of commands with iisapppool\nmconsole privileges.Show less
CVE-2024-4883
1Progress
1Whatsup Gold
Jun 17, 2026
Jun 25, 2024
N/A· v4
9.8 CRITICAL· v3
N/A· v2
In WhatsUp Gold versions released before 2023.1.3, a Remote Code Execution issue exists in Progress WhatsUp Gold. This vulnerability allows an unauthenticated attacker to achieve the RCE as a service account through NmAp...Show more
In WhatsUp Gold versions released before 2023.1.3, a Remote Code Execution issue exists in Progress WhatsUp Gold. This vulnerability allows an unauthenticated attacker to achieve the RCE as a service account through NmApi.exe.Show less
CVE-2024-5806
1Progress
1Moveit Transfer
Jun 17, 2026
Jun 25, 2024
N/A· v4
9.8 CRITICAL· v3
N/A· v2
Improper Authentication vulnerability in Progress MOVEit Transfer (SFTP module) can lead to Authentication Bypass.This issue affects MOVEit Transfer: from 2023.0.0 before 2023.0.11, from 2023.1.0 before 2023.1.6, from 20...Show more
Improper Authentication vulnerability in Progress MOVEit Transfer (SFTP module) can lead to Authentication Bypass.This issue affects MOVEit Transfer: from 2023.0.0 before 2023.0.11, from 2023.1.0 before 2023.1.6, from 2024.0.0 before 2024.0.2.Show less
CVE-2024-5805
1Progress
1Moveit Gateway
Jun 17, 2026
Jun 25, 2024
N/A· v4
9.1 CRITICAL· v3
N/A· v2
Improper Authentication vulnerability in Progress MOVEit Gateway (SFTP modules) allows Authentication Bypass.This issue affects MOVEit Gateway: 2024.0.0.
CVE-2023-27636
1Progress
1Sitefinity
Jun 17, 2026
Jun 16, 2024
N/A· v4
5.4 MEDIUM· v3
N/A· v2
Progress Sitefinity before 15.0.0 allows XSS by authenticated users via the content form in the SF Editor.
CVE-2024-4563
1Progress
1Moveit Automation
Jun 17, 2026
May 22, 2024
N/A· v4
7.5 HIGH· v3
N/A· v2
The Progress MOVEit Automation configuration export function prior to 2024.0.0 uses a cryptographic method with insufficient bit length.
CVE-2024-4837
1Progress
1Telerik Report Server
Jun 17, 2026
May 15, 2024
N/A· v4
5.3 MEDIUM· v3
N/A· v2
In Progress Telerik Report Server, version 2024 Q1 (10.0.24.305) or earlier, on IIS, an unauthenticated attacker can gain access to Telerik Report Server restricted functionality via a trust boundary violation vulnerabil...Show more
In Progress Telerik Report Server, version 2024 Q1 (10.0.24.305) or earlier, on IIS, an unauthenticated attacker can gain access to Telerik Report Server restricted functionality via a trust boundary violation vulnerability.Show less
CVE-2024-4357
1Progress
1Telerik Reporting
Jun 17, 2026
May 15, 2024
N/A· v4
6.5 MEDIUM· v3
N/A· v2
An information disclosure vulnerability exists in Progress Telerik Report Server, version 2024 Q1 (10.0.24.305) or earlier, allows low-privilege attacker to read systems file via XML External Entity Processing.
CVE-2024-4202
1Progress
1Telerik Reporting
Jun 17, 2026
May 15, 2024
N/A· v4
8.6 HIGH· v3
N/A· v2
In Progress® Telerik® Reporting versions prior to 2024 Q2 (18.1.24.514), a code execution attack is possible through an insecure instantiation vulnerability.
CVE-2024-4200
1Progress
1Telerik Reporting
Jun 17, 2026
May 15, 2024
N/A· v4
7.8 HIGH· v3
N/A· v2
In Progress® Telerik® Reporting versions prior to 2024 Q2 (18.1.24.2.514), a code execution attack is possible by a local threat actor through an insecure deserialization vulnerability.
CVE-2024-3892
1Progress
1Telerik Ui For Winforms
Jun 17, 2026
May 15, 2024
N/A· v4
6.7 MEDIUM· v3
N/A· v2
A local code execution vulnerability is possible in Telerik UI for WinForms beginning in v2021.1.122 but prior to v2024.2.514. This vulnerability could allow an untrusted theme assembly to execute arbitrary code on the l...Show more
A local code execution vulnerability is possible in Telerik UI for WinForms beginning in v2021.1.122 but prior to v2024.2.514. This vulnerability could allow an untrusted theme assembly to execute arbitrary code on the local Windows system.Show less
CVE-2024-4562
1Progress
1Whatsup Gold
Jun 17, 2026
May 14, 2024
N/A· v4
5.4 MEDIUM· v3
N/A· v2
In WhatsUp Gold versions released before 2023.1.2 , an SSRF vulnerability exists in Whatsup Gold's Issue exists in the HTTP Monitoring functionality.  Due to the lack of proper authorization, any authenticated use...Show more
In WhatsUp Gold versions released before 2023.1.2 , an SSRF vulnerability exists in Whatsup Gold's Issue exists in the HTTP Monitoring functionality.  Due to the lack of proper authorization, any authenticated user can access the HTTP monitoring functionality, what leads to the Server Side Request Forgery. Show less
CVE-2024-4561
1Progress
1Whatsup Gold
Jun 17, 2026
May 14, 2024
N/A· v4
5.3 MEDIUM· v3
N/A· v2
In WhatsUp Gold versions released before 2023.1.2 , a blind SSRF vulnerability exists in Whatsup Gold's FaviconController that allows an attacker to send arbitrary HTTP requests on behalf of the vulnerable server.
CVE-2024-3544
1Progress
1Loadmaster
Jun 17, 2026
May 2, 2024
N/A· v4
7.5 HIGH· v3
N/A· v2
Unauthenticated attackers can perform actions, using SSH private keys, by knowing the IP address and having access to the same network of one of the machines in the HA or Cluster group. This vulnerability has been close...Show more
Unauthenticated attackers can perform actions, using SSH private keys, by knowing the IP address and having access to the same network of one of the machines in the HA or Cluster group. This vulnerability has been closed by enhancing LoadMaster partner communications to require a shared secret that must be exchanged between the partners before communication can proceed. Show less